
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/ffc43895-b315-3273-93f2-d1fb5201ea81.roa
File: ffc43895-b315-3273-93f2-d1fb5201ea81.roa (raw, json)
Hash identifier: Peb5Vuv/MtEd8PHgZ+0nvdEJ5kKOXbjCoZXvKxMcdsw=
Subject key identifier: 47:7A:B6:D5:F6:49:59:45:96:41:6F:76:59:36:C5:A1:84:77:A6:23
Certificate issuer: /CN=994eeb97-12ef-4721-824f-9ba41ba67983
Certificate serial: 010D0C9F4328584B0E416479962F91DA863F1040
Authority key identifier: 1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/ffc43895-b315-3273-93f2-d1fb5201ea81.roa
Signing time: Tue 02 Sep 2025 01:00:32 +0000
ROA not before: Tue 02 Sep 2025 01:00:32 +0000
ROA not after: Mon 01 Dec 2025 02:00:32 +0000
asID: 23539
IP address blocks: 143.223.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:0e:41:64:79:96:2f:91:da:86:3f:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994eeb97-12ef-4721-824f-9ba41ba67983
Validity
Not Before: Sep 2 01:00:32 2025 GMT
Not After : Dec 1 02:00:32 2025 GMT
Subject: CN=f67c9dea-eade-438d-add4-2c506c962fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:51:f9:20:49:2c:eb:0c:05:38:b7:69:01:f8:
43:fa:58:89:3b:e5:e0:e6:c9:a6:2d:d5:33:c4:81:
d0:c8:33:cc:44:2a:57:77:75:a5:91:95:3a:24:eb:
4f:0f:44:34:6e:23:e6:39:17:03:08:c9:3d:7d:fe:
b1:42:ee:08:24:5a:e6:81:06:46:39:8a:85:f0:2c:
99:a0:df:a4:3e:84:1a:1c:8f:2b:72:e3:fb:f7:64:
09:55:56:2a:62:8a:d9:62:9f:e6:de:0d:1d:1e:6a:
ae:ca:bf:01:ed:1f:d3:39:10:28:45:81:dc:9e:f9:
d9:f5:98:73:fe:e2:b5:1b:39:71:6d:0e:ea:d6:64:
47:4d:02:cf:66:d3:80:44:20:68:e9:f0:9d:23:4b:
a3:3c:66:6f:3f:10:ef:71:a2:9c:41:cb:68:06:d3:
87:f2:8a:de:f5:c3:c6:c4:0c:c9:a4:4e:88:94:ae:
18:7e:02:15:07:70:cc:89:9c:6c:bb:6e:57:2b:47:
d8:e0:17:1b:b0:6d:35:e2:a5:e0:01:6b:28:fc:d2:
02:1f:cc:17:bf:99:41:91:64:10:11:8e:40:0b:ec:
3c:c3:0b:bc:9f:84:af:6a:c3:10:29:71:03:f8:97:
11:e0:ec:7d:58:a5:7c:e2:67:19:87:59:8d:ce:13:
93:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7A:B6:D5:F6:49:59:45:96:41:6F:76:59:36:C5:A1:84:77:A6:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/ffc43895-b315-3273-93f2-d1fb5201ea81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl
X509v3 Authority Key Identifier:
keyid:1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer
sbgp-ipAddrBlock: critical
IPv4:
143.223.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:d2:1f:d0:f5:c6:b4:9d:33:60:d4:19:93:9b:3f:2b:2a:d4:
39:2d:80:bc:06:cd:08:cd:9d:a1:11:06:06:fe:23:67:b8:90:
99:0e:2e:c5:cb:4d:0e:ea:49:58:18:15:f2:6c:c4:86:b4:e5:
c8:a3:ca:e9:37:80:4e:b4:b4:d8:5f:ba:3c:58:d3:5f:fc:3d:
bf:13:97:5d:4b:f1:31:da:f5:eb:8d:9d:e2:cb:d2:fb:c6:dc:
59:c9:64:a5:ea:fc:4f:fa:04:ef:b8:ca:ab:39:54:0b:6d:9b:
5f:8c:b8:2c:aa:fb:7b:3d:6b:f2:4a:6d:bf:bb:bb:62:1b:d4:
4e:0e:f2:8b:5e:48:35:cf:b7:8c:74:45:54:36:c8:79:72:a9:
2b:eb:9e:66:5e:68:17:fc:70:09:3c:46:0c:0f:0d:24:62:a8:
3e:2f:54:6c:6a:80:fa:1d:a8:52:b4:39:55:0b:c6:66:f9:71:
dc:6d:a4:af:ad:6f:76:ef:bc:20:ea:38:1c:8e:d6:e6:e0:e9:
4c:1f:80:61:2f:1e:65:93:85:d2:e3:a6:8d:61:cc:d2:56:e2:
41:16:b9:da:98:5a:44:27:bb:e9:eb:e3:38:08:d6:b5:ce:f4:
43:46:af:89:30:f3:71:85:88:cd:2f:56:d1:ca:38:8b:fd:8a:
4a:01:f9:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsOQWR5li+R2oY/EEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk0ZWViOTctMTJlZi00NzIxLTgyNGYtOWJhNDFiYTY3
OTgzMB4XDTI1MDkwMjAxMDAzMloXDTI1MTIwMTAyMDAzMlowLzEtMCsGA1UEAxMk
ZjY3YzlkZWEtZWFkZS00MzhkLWFkZDQtMmM1MDZjOTYyZmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlH5IEks6wwFOLdpAfhD+liJO+Xg5smmLdUz
xIHQyDPMRCpXd3WlkZU6JOtPD0Q0biPmORcDCMk9ff6xQu4IJFrmgQZGOYqF8CyZ
oN+kPoQaHI8rcuP792QJVVYqYorZYp/m3g0dHmquyr8B7R/TORAoRYHcnvnZ9Zhz
/uK1GzlxbQ7q1mRHTQLPZtOARCBo6fCdI0ujPGZvPxDvcaKcQctoBtOH8ore9cPG
xAzJpE6IlK4YfgIVB3DMiZxsu25XK0fY4BcbsG014qXgAWso/NICH8wXv5lBkWQQ
EY5AC+w8wwu8n4SvasMQKXED+JcR4Ox9WKV84mcZh1mNzhOTsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEd6ttX2SVlFlkFvdlk2xaGEd6YjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRl
ZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0MWJhNjc5ODMvZmZjNDM4OTUtYjMxNS0z
MjczLTkzZjItZDFmYjUyMDFlYTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTk0ZWViOTctMTJlZi00NzIxLTgy
NGYtOWJhNDFiYTY3OTgzLzk5NGVlYjk3LTEyZWYtNDcyMS04MjRmLTliYTQxYmE2
Nzk4My5jcmwwHwYDVR0jBBgwFoAUHHbEf8LL+oxCYBMTd941QZrU5EQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRlZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0
MWJhNjc5ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBj99SMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXSH9D1xrSdM2DUGZObPysq1DktgLwGzQjNnaERBgb+I2e4kJkOLsXL
TQ7qSVgYFfJsxIa05cijyuk3gE60tNhfujxY01/8Pb8Tl11L8THa9euNneLL0vvG
3FnJZKXq/E/6BO+4yqs5VAttm1+MuCyq+3s9a/JKbb+7u2Ib1E4O8oteSDXPt4x0
RVQ2yHlyqSvrnmZeaBf8cAk8RgwPDSRiqD4vVGxqgPodqFK0OVULxmb5cdxtpK+t
b3bvvCDqOByO1ubg6UwfgGEvHmWThdLjpo1hzNJW4kEWudqYWkQnu+nr4zgI1rXO
9ENGr4kw83GFiM0vVtHKOIv9ikoB+Uw=
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:10:08 2025 by rpki-client